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AMENDMENTS TO THE CLAIMS 

The claims in this listing will replace all prior versions, and listings, of claims in 
the application. 

1 . (Currently Amended) A device authentication system in which a first device 
authenticates a second device, 

wherein the first device comprises: 

a transmission/reception section that transmits and receives information to/from 
the second device; 

a first information holding section that holds first authentication information in a 
secure area; and 

a decider that makes a decision on authentication, 
the second device comprises: 

a transmission/reception section that transmits and receives information to/from 
the first device; 

a second information holding section that holds second authentication 
information; 

an information acquirer that acquires third authentication information from outs i de 
externally of the second device , said third authentication information comprising user 
identification information ; and 

an authentication information generator which generates fourth authentication 
information from the second authentication information and the third authentication 
information, and outputs the fourth authentication information to the first device through 
the transmission/reception section, and 
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wherein the decider makes a decision on conformity between the first 
authentication information and the fourth authentication information to authenticate the 
second device , and 

wherein, when the first device does not hoid the first authentication information, a 
device that performs mutual authentication with the first device acquires the fourth 
authentication information from the second device, and sets the first device for the first 
authentication information as an initial setting. 

2. (Original) The device authentication system according to claim 1 , wherein the 
second authentication information is information specific to the second device. 

3. (Original) The device authentication system according to claim 1, wherein the 
second authentication information is random information generated in the first device. 

4. (Currently Amendedl) The device authentication system according to claim 3, 
wherein the second authentication information is updated whenever the authentication 
processing is performed, and according to in accordance with the update of the second 
authentication information, the first authentication information held in the first 
information holding section in the first device is updated. 

5. (Canceled) 

6. (Currently Amended) The device authentication system according to claim 1, 
wherein the third authentication information is held in a predetermined device that 
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performs mutua! authentication with the first device, and is provided from the 
predetermined device to the second device in authentication processing. 

7. (Currently Amended) A device authentication method in which a first device 
authenticates a second device, the method comprising: 

wh e r ei rMho first dev i ce holds holding, by the first device, first authentication 
information in a secure area, 

the — s e cond — devic e that — ho l d s holding by the second device, second 
authentication i nformat i on g e n e rat e s information, and generating fourth authentication 
information fefm from the second authentication information and third authentication 
information provided from outs id e externally of the second device, the third 
authentication information comprising user identification information , and 

th e f i r s t dev i ce mak e s a d e cision deciding, by the first device, on conformity 

between the first authentication information and the fourth authentication information to 
authenticate the second device 

wherein, when the first device does not hold the first authentication information, a 
device that performs mutual authentication with the first device acquires the fourth 
authentication information from the second device, and sets the first device for the first 
authentication information as an initial setting. 

8. (Currently Amended) A second device to be authenticated by a first device 
that holds first authentication information in a secure area , the second device 
comprising: 

a transmission/reception section that transmits and receives information to/from 
the first device; 
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an information holding section that holds second authentication information; 

an information acquirer that acquires third authentication information from out si d e 
externally of the second device , the third authentication information comprising user 
identification information ; and 

an authentication information generator which generates fourth authentication 
information from the second authentication information and the third authentication 
information, and outputs the fourth authentication information to the first device through 
the transmission/reception section 

wherein, when the first device does not hold the first authentication information, a 
device that performs mutual authentication with the first device acquires the fourth 
authentication information from the second device, and sets the first device for the first 
authentication information as an initial setting. 

9. (Original) The second device according to claim 8, wherein the 
transmission/reception section receives random information from the first device, and 
the authentication information generator encrypts the random information using the 
fourth authentication information to transmit to the first device through the 
transmission/reception section. 

10. (Currently Amended) The second device according to claim 8, wherein the 
transmission/reception section receives the random information from the first device, 
and the authentication information generator encrypts the fourth authentication 
information using the random information to transmit to the first device through the 
transmission/reception section. 
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11. (Currently Amended) The second device according to claim 8, further 
comprising: 

an update control section that controls update updating of information required 
for - pro cessi ng for a uthentication for authentication processing , 

wherein after authentication from the first device succeeds, substituting for the 
second authentication information, the update control section stores stores, in the 
information holding s e ction the section, the random information as new second 
authentication information, generates key information that is new authentication 
information from the third authentication information and the random information, and 
has the first device hoid the key information through the transmission/reception section. 

12. (Currently Amended) The second device according to claim 9, further 
comprising: 

an update control section that controls update updating of information required 
for proc e ssing for aut hentic at ion for authentication processing . 

wherein after authentication from the first device succeeds, substituting for the 
second authentication information, the update control section s tor e s stores, in the 
information holding s ection section, the random information as new second 
authentication information, generates key information that is new authentication 
information from the third authentication information and the random information, and 
has the first device hold the key information through the transmission/reception section. 

13. (Currently Amended) The second device according to claim 10, further 
comprising: 
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an update control section that controls update updating of information required 
for proces sing for authent i cation for authentication processing, 

wherein after authentication from the first device succeeds, substituting for the 
second authentication information, the update control section stor e s stores, in the 
information holding s e ction section, the random information as new second 
authentication information, generates key information that is new authentication 
information from the third authentication information and the random information, and 
has the first device hold the key information through the transmission/reception section. 

14. (Currently Amended) A first device that authenticates a second device, the 
second device containing second authentication information, acquiring third 
authentication information externally of the second device, the third authentication 
information comprising user identification information, and generating fourth 
authentication information from the second and third authentication information, the first 
device comprising: 

a transmission/reception section that transmits and receives information to/from 
the second device; 

an information holding section that holds first authentication information in a 
secure area; and 

a decider that makes a decision on conformity between the fourth authentication 
information received in the transmission/reception section and the first authentication 
information 

wherein, when the first device does not hold the first authentication information, a 
device that performs mutual authentication with the first device acquires the fourth 
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authentication information from the second device, and sets the first device for the first 
authentication information as an initial setting. 

15. (Original) The first device according to claim 14, further comprising: 

a random information generator that generates random information to transmit to 
the second device through the transmission/reception section, 

wherein the decider decodes information received in the transmission/reception 
section using the first authentication information, and makes a decision on conformity 
between the decoded information and the random information. 

16. (Original) The first device according to claim 14, further comprising: 

a random information generator that generates random information to transmit to 
the second device through the transmission/reception section, 

wherein the decider decodes information received in the transmission/reception 
section using the random information, and makes a decision on conformity between the 
decoded information and the first authentication information. 

17. (Originai) The first device according to claim 14,wherein after authentication 
of the second device succeeds, substituting for the first authentication information, the 
information holding section holds key information that is new authentication information 
received in the transmission/reception section, as new first authentication information. 



18. (Original) The first device according to claim 15,wherein after authentication 
of the second device succeeds, substituting for the first authentication information, the 
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information holding section holds key information that is new authentication information 
received in the transmission/reception section, as new first authentication information. 

19. (Original) The first device according to claim 16,wherein after authentication 
of the second device succeeds, substituting for the first authentication information, the 
information holding section holds key information that is new authentication information 
received in the transmission/reception section, as new first authentication information. 

20. (Currently Amended) A computer readable medium that stores a program 
for having a computer, which is integrated into a second device to be authenticated by a 
first device, perform the authentication, the computer readable medium o x c cut o the 
proc e dur e s of : 

a generating code segment that generates fourth authentication information from 
second authentication information that the second device holds and third authentication 
information acquired from outsid e externally of the second device the third 
authentication information comprising user identification information ; 

a requesting an i ssu e code segment that requests issuance of random 
information to the first device; and 

an encrypting code segment that encrypts the random information received from 
the first device using the fourth authentication information to output to the first device 

wherein, when the first device does not hold the first authentication information, a 
device that performs mutual authentication with the first device acouires the fourth 
authentication information from the second device, and sets the first device for the first 
authentication information as an initial setting. 
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